Monday November 30th, 2015 9:04PM

Health care site flagged in Heartbleed review

By The Associated Press
WASHINGTON (AP) -- People who have accounts on the enrollment website for President Barack Obama's signature health care law are being told to change their passwords following an administration-wide review of the government's vulnerability to the confounding Heartbleed Internet security flaw.

Senior administration officials said there is no indication that the site has been compromised and the action is being taken out of an abundance of caution. The government's Heartbleed review is ongoing, the officials said, and users of other websites may also be told to change their passwords in the coming days, including those with accounts on the popular petitions page.

The Heartbleed programming flaw has caused major security concerns across the Internet and affected a widely used encryption technology that was designed to protect online accounts. Major Internet services have been working to insulate themselves against the problem and are also recommending that users change their website passwords.

Officials said the administration was prioritizing its analysis of websites with heavy traffic and the most sensitive user information. A message that will be posted on the health care website starting Saturday reads: "While there's no indication that any personal information has ever been at risk, we have taken steps to address Heartbleed issues and reset consumers' passwords out of an abundance of caution."

The health care website became a prime target for critics of the Obamacare law last fall when the opening of the insurance enrollment period revealed widespread flaws in the online system. Critics have also raised concerns about potential security vulnerabilities on a site where users input large amounts of personal data.

The website troubles were largely fixed during the second month of enrollment and sign-ups ultimately surpassed initial expectations. Obama announced this week that about 8 million people had enrolled in the insurance plans.

The full extent of the damage caused by the Heartbleed is unknown. The security hole exists on a vast number of the Internet's Web servers and went undetected for more than two years. Although it's conceivable that the flaw was never discovered by hackers, it's difficult to tell.

The White House has said the federal government was not aware of the Heartbleed vulnerability until it was made public in a private sector cybersecurity report earlier this month. The federal government relies on the encryption technology that is impacted - OpenSSL - to protect the privacy of users of government websites and other online services.

The Homeland Security Department has been leading the review of the government's potential vulnerabilities. The Internal Revenue Service, a widely used website with massive amounts of personal data on Americans, has already said it was not impacted by Heartbleed.

"We will continue to focus on this issue until government agencies have mitigated the vulnerability in their systems," Phyllis Schneck, DHS deputy undersecretary for cybersecurity and communications, wrote in a blog post on the agenda website. "And we will continue to adapt our response if we learn about additional issues created by the vulnerability."

Officials wouldn't say how government websites they expect to flag as part of the Heartbleed security review, but said it's likely to be a limited number. The officials insisted on anonymity because they were not authorized to discuss the security review by name.
© Copyright 2015
All rights reserved. This material may not be published, broadcast, rewritten, or redistributed without permission.
Judge denies motions to move, delay Tsarnaev trial
Lawyers for Boston Marathon bombing suspect Dzhokhar Tsarnaev asked a federal appeals court Wednesday to overturn a judge's decision to not move his upcoming trial out of state.
10:02PM ( 10 months ago )
High court to adopt electronic filing of cases
The Supreme Court is belatedly developing an electronic filing system similar to those used in courts around the country, Chief Justice John Roberts said Wednesday in his annual end-of-year report.
7:57PM ( 11 months ago )
Storm brings snow, cold to West for New Year's
A blustery winter storm dumped snow and ice across the West on Wednesday, making driving treacherous in the mountains from California to the Rockies and forcing residents and party-goers in some usually sun-soaked cities to bundle up for a frosty New Year's.
5:19PM ( 10 months ago )
U.S. News
State DOT awards $48M contract for NE Ga. road project
The state Department of Transportation has awarded a $47.8 million contract for nine miles of work on a northeast Georgia road.
9:37AM ( 10 months ago )
Business News
Grass fire impacts rush hour traffic on 985
Rush hour traffic on I-985 was slowed by a grass fire Wednesay afternoon with one lane closed while firefighters fought the blaze.
10:19PM ( 10 months ago )
Hall County conviction, sentencing to be reviewed by SCOGA
The State Supreme Court has agreed to hear the appeal of a Hall County man when they reconvene in January.
2:37PM ( 10 months ago )
Maysville man dies from Banks County wreck
The Georgia State Patrol reports that alcohol and/or drugs were factors a single-vehicle wreck that claimed the life of a Maysville man in Banks County Tuesday night.
11:07AM ( 10 months ago )
Local/State News
GOP leader regrets talk to white supremacists; party leaders rally around him
House Republican leaders rallied around one of their own, Whip Steve Scalise, on Tuesday after he said he regrets speaking 12 years ago to a white supremacist organization and condemns the views of such groups.
6:08PM ( 11 months ago )
Conviction of Putin foe sets off protest in Moscow
President Vladimir Putin's chief political foe was convicted along with his brother on Tuesday in a fraud case widely seen as a vendetta by the Kremlin, triggering one of Russia's boldest anti-government demonstrations in years.
6:03PM ( 11 months ago )
More Georgians signing up for health insurance
A federal report says more Georgians have selected health insurance plans through a federally facilitated marketplace.
4:16PM ( 11 months ago )
Standoff at Planned Parenthood ends with suspect's arrest; 3 killed, 9 wounded
COLORADO SPRINGS, Colo. (AP) — A gunman who opened fire inside a Planned Parenthood clinic was arrested Friday after engaging in gun battles with authorities during an hourslong standoff that killed t...
1:13AM ( 2 days ago )
White House undergoes Thanksgiving Day lockdown after man draped in American flag jumps fence
WASHINGTON (AP) — A man draped in an American flag climbed over the fence at the White House on Thursday, prompting a lockdown as the first family celebrated Thanksgiving.The man was immediately appre...
10:11PM ( 3 days ago )
Obama grants reprieve to turkeys 'Honest' and 'Abe' during White House ceremony
WASHINGTON (AP) — President Barack Obama spared two turkeys named for one of the nation's most admired presidents, continuing a White House tradition that provides a refreshing sense of amusement and...
9:18PM ( 4 days ago )
The Latest: UN Security Council strongly condemns 'horrifying' attack in Mali, urges probe
BAMAKO, Mali (AP) — The latest on the attack on a hotel in the Malian capital of Bamako. (All times local):___4:55 a.m.The U.N. Security Council is condemning "the horrifying terrorist attack" at the...
10:58PM ( 1 week ago )
World leaders vow vigorous response to Paris terror spree, but little indication of next steps
ANTALYA, Turkey (AP) — World leaders vowed a vigorous response to the Islamic State group's terror spree in Paris as they opened a two-day meeting in Turkey on Sunday, with President Barack Obama call...
2:14PM ( 2 weeks ago )